Kill dnsmasq instead of dhcp and restore previous iptables rules

offensive-security · Dec 19, 2016 · 8a64208 · 8a64208
1 parent 7c53096
commit 8a64208
Show file tree

Hide file tree

Showing 3 changed files with 35 additions and 12 deletions.
diff --git a/usr/share/mana-toolkit/run-mana/start-nat-full-lollipop.sh b/usr/share/mana-toolkit/run-mana/start-nat-full-lollipop.sh
@@ -37,8 +37,13 @@ ip route add 10.0.0.0/24 dev $phy scope link table $table
 # http://lists.netfilter.org/pipermail/netfilter-buglog/2013-October/002995.html
 iptables -F bw_INPUT
 iptables -F bw_OUTPUT
+
 # Save
-# iptables-save > /tmp/rules.txt
+iptables-save > /tmp/rules.txt
+# Remove non-working export lines
+sed --in-place '/rmnet0/d' /tmp/rules.txt
+sed --in-place '/TCPMSS/d' /tmp/rules.txt
+
 # Flush
 iptables --policy INPUT ACCEPT
 iptables --policy FORWARD ACCEPT
@@ -86,7 +91,8 @@ sleep 5
 
 echo "Hit enter to kill me"
 read
-pkill dhcpd
+#pkill dhcpd
+pkill dnsmasq
 pkill sslstrip
 pkill sslsplit
 pkill hostapd

diff --git a/usr/share/mana-toolkit/run-mana/start-nat-simple-bdf-lollipop.sh b/usr/share/mana-toolkit/run-mana/start-nat-simple-bdf-lollipop.sh
@@ -37,8 +37,14 @@ ip route add 10.0.0.0/24 dev $phy scope link table $table
 # http://lists.netfilter.org/pipermail/netfilter-buglog/2013-October/002995.html
 iptables -F bw_INPUT
 iptables -F bw_OUTPUT
+
 # Save
-# iptables-save > /tmp/rules.txt
+iptables-save > /tmp/rules.txt
+# Remove non-working export lines
+sed --in-place '/rmnet0/d' /tmp/rules.txt
+sed --in-place '/TCPMSS/d' /tmp/rules.txt
+
+
 # Flush
 iptables --policy INPUT ACCEPT
 iptables --policy FORWARD ACCEPT
@@ -63,14 +69,17 @@ echo $! > /tmp/bdfproxy.pid
 
 echo "Hit enter to kill me"
 read
-pkill dhcpd
+#pkill dhcpd
+pkill dnsmasq
 pkill sslstrip
 pkill sslsplit
 pkill hostapd
 pkill python
+
 # Restore
-# iptables-restore < /tmp/rules.txt
-# rm /tmp/rules.txt
+iptables-restore < /tmp/rules.txt
+rm /tmp/rules.txt
+
 # Remove iface and routes
 ip addr flush dev $phy
 ip link set $phy down
diff --git a/usr/share/mana-toolkit/run-mana/start-nat-simple-lollipop.sh b/usr/share/mana-toolkit/run-mana/start-nat-simple-lollipop.sh
@@ -37,8 +37,13 @@ ip route add 10.0.0.0/24 dev $phy scope link table $table
 # http://lists.netfilter.org/pipermail/netfilter-buglog/2013-October/002995.html
 iptables -F bw_INPUT
 iptables -F bw_OUTPUT
+
 # Save
-# iptables-save > /tmp/rules.txt
+iptables-save > /tmp/rules.txt
+# Remove non-working export lines
+sed --in-place '/rmnet0/d' /tmp/rules.txt
+sed --in-place '/TCPMSS/d' /tmp/rules.txt
+
 # Flush
 iptables -F
 iptables -F -t nat
@@ -48,14 +53,17 @@ iptables -A FORWARD -i $phy -o $upstream -j ACCEPT
 
 echo "Hit enter to kill me"
 read
-pkill dhcpd
+#pkill dhcpd
+pkill dnsmasq
 pkill sslstrip
 pkill sslsplit
 pkill hostapd
 pkill python
-## Restore
-#iptables-restore < /tmp/rules.txt
-#rm /tmp/rules.txt
-## Remove iface and routes
+
+# Restore
+iptables-restore < /tmp/rules.txt
+rm /tmp/rules.txt
+
+# Remove iface and routes
 ip addr flush dev $phy
 ip link set $phy down